mitra-interactions-sdk 1.0.58-beta.3 → 1.0.58-beta.4

package/dist/index.d.mts

@@ -627,6 +627,109 @@ interface AgentTaskSession {
     clearQueue(): void;
     on<E extends AgentTaskEventName>(event: E, handler: (payload: AgentTaskEventMap[E]) => void): () => void;
 }
+/** Targets de subscription (OAuth/device flow). */
+type AgentSubscriptionTarget = 'claude' | 'openai_oauth' | 'codex';
+/** Targets de API key (8 providers suportados pelo backend). */
+type AgentApiKeyTarget = 'anthropic' | 'openai' | 'gemini' | 'kimi' | 'minimax' | 'glm' | 'qwen' | 'openrouter';
+/** Union — qualquer credencial. */
+type CredentialTarget = AgentSubscriptionTarget | AgentApiKeyTarget;
+/**
+ * Verbos aceitos por `manageAgentCredentialMitra`.
+ *
+ * Baixo nível (RPC direto contra o backend `credentials`):
+ *   status | remove | list | validate | save
+ *   oauth_start | oauth_exchange | device_start | device_poll | device_cancel
+ *
+ * Alto nível (orquestrado no browser, NÃO é um type WS — encadeia as actions
+ * de baixo nível + abre popup + espera autorização):
+ *   connect
+ */
+type CredentialAction = 'connect' | 'status' | 'remove' | 'list' | 'validate' | 'save' | 'oauth_start' | 'oauth_exchange' | 'device_start' | 'device_poll' | 'device_cancel';
+/**
+ * Opções de baixo nível (RPC direto) de `manageAgentCredentialMitra`. Campos
+ * extras (key, code, codeVerifier, redirectUri, pollId, accessToken,
+ * refreshToken, expiresAt) são empacotados em `data` antes de enviar ao backend.
+ *
+ * NÃO use com action='connect' — para isso use ConnectAgentCredentialOptions.
+ */
+interface ManageAgentCredentialOptions {
+    action: Exclude<CredentialAction, 'connect'>;
+    /** Obrigatório exceto para action='list'. */
+    target?: CredentialTarget;
+    /** Para `save` / `validate` de API key. */
+    key?: string;
+    /** Para `oauth_exchange`. */
+    code?: string;
+    /** Para `oauth_exchange`. */
+    state?: string;
+    /** Para `oauth_exchange`. */
+    codeVerifier?: string;
+    /** Para `oauth_start` (openai_oauth) e `oauth_exchange` (openai_oauth). */
+    redirectUri?: string;
+    /** Para `device_poll` / `device_cancel`. */
+    pollId?: string;
+    /** Para `save` (codex). */
+    accessToken?: string;
+    /** Para `save` (codex). */
+    refreshToken?: string;
+    /** Para `save` (codex). */
+    expiresAt?: number;
+}
+/** Tipo "ampliado" — o backend retorna shapes diferentes por (action, target). */
+type ManageAgentCredentialResult = unknown;
+interface AgentSubscriptionAccount {
+    email: string;
+    orgName: string;
+}
+/**
+ * Opções de alto nível de `manageAgentCredentialMitra` quando action='connect'.
+ * Orquestra o fluxo OAuth/device ponta-a-ponta no browser (abre popup, espera
+ * autorização, troca por tokens server-side).
+ */
+interface ConnectAgentCredentialOptions {
+    action: 'connect';
+    target: AgentSubscriptionTarget;
+    /**
+     * Callback que retorna o código que o usuário copiou da página da Anthropic
+     * após autorizar. **Obrigatório** para target='claude'.
+     */
+    onCodeNeeded?: (info: {
+        authUrl: string;
+        state: string;
+    }) => Promise<string> | string;
+    /**
+     * URL no domínio do app publicado que captura o `?code=` da OAuth e faz
+     * `window.opener.postMessage({ mitraOpenAICode: code }, '*')`.
+     * **Obrigatório** para target='openai_oauth'.
+     */
+    redirectUri?: string;
+    /** Timeout esperando o postMessage (default 5min). */
+    messageTimeoutMs?: number;
+    /**
+     * Callback opcional que recebe o `userCode` e `verificationUrl` assim que
+     * o device flow inicia (use pra exibir na UI além do popup automático).
+     */
+    onDeviceCode?: (info: {
+        userCode: string | null;
+        verificationUrl: string | null;
+    }) => void;
+    /** Intervalo de poll do device flow (default 2000ms). */
+    pollIntervalMs?: number;
+    /** Timeout total do device flow (default 15min). */
+    deviceTimeoutMs?: number;
+    /** Nome da window do popup (default depende do target). */
+    windowName?: string;
+    /** `features` string passada para `window.open`. */
+    windowFeatures?: string;
+}
+interface ConnectAgentSubscriptionResult {
+    target: AgentSubscriptionTarget;
+    success: boolean;
+    /** Presente em claude / openai_oauth (epoch ms). */
+    expiresAt?: number;
+    /** Presente apenas em claude. */
+    account?: AgentSubscriptionAccount | null;
+}
 
 /**
  * Mitra Interactions SDK - Instance
@@ -676,7 +779,7 @@ interface MitraInstance {
     resetPassword(options: ResetPasswordOptions): Promise<Record<string, unknown>>;
     getAgentChats(options?: GetAgentChatsOptions): Promise<AgentChat[]>;
     getAgentTask(options: GetAgentTaskOptions): AgentTaskSession;
-    disconnectAgentChat(): void;
+    manageAgentCredential(options: ManageAgentCredentialOptions | ConnectAgentCredentialOptions): Promise<unknown>;
     openChat(): void;
     closeChat(): void;
 }
@@ -832,11 +935,61 @@ declare function getAgentChatsMitra(options?: GetAgentChatsOptions): Promise<Age
  * mesma taskId for aberta duas vezes, retorna a MESMA instância (cache).
  */
 declare function getAgentTaskMitra(options: GetAgentTaskOptions): AgentTaskSession;
+
 /**
- * Fecha o WebSocket do Agent Chat. Sessions ativas devem chamar close()
- * antes — esta função é destinada a teardown global (logout, testes).
+ * Mitra Interactions SDK — Agent Credentials
+ *
+ * Função ÚNICA `manageAgentCredentialMitra` sobre /sdk-ws para todas as
+ * operações de credencial do agente:
+ *   - API keys (8 providers: anthropic, openai, gemini, kimi, minimax, glm, qwen, openrouter)
+ *   - Subscriptions OAuth (Claude / OpenAI / Codex device flow)
+ *
+ * Actions de baixo nível (RPC direto contra o backend):
+ *   status | remove | list | validate | save
+ *   oauth_start | oauth_exchange | device_start | device_poll | device_cancel
+ *
+ * Action de alto nível (orquestra o fluxo ponta-a-ponta no browser):
+ *   connect — abre popup, espera código/postMessage/poll, troca por tokens.
+ *
+ * SEGURANÇA: o token de subscription NUNCA volta cru pro cliente. É salvo
+ * server-side (Firestore) e injetado no sandbox E2B direto de lá. O retorno
+ * de `connect`/`oauth_exchange` traz só { connected, expiresAt, account }.
+ */
+
+/**
+ * Conecta uma subscription ponta-a-ponta (abre popup, espera autorização,
+ * troca por tokens). Retorno tipado: { target, success, expiresAt?, account? }.
+ *
+ * @example
+ * // Claude — caller mostra modal pedindo o paste do código
+ * await manageAgentCredentialMitra({
+ *   action: 'connect', target: 'claude',
+ *   onCodeNeeded: async () => prompt('Cole o código:') ?? ''
+ * });
+ *
+ * @example
+ * // OpenAI — callback page no domínio do app faz postMessage
+ * await manageAgentCredentialMitra({
+ *   action: 'connect', target: 'openai_oauth',
+ *   redirectUri: window.location.origin + '/auth/openai-callback'
+ * });
+ *
+ * @example
+ * // Codex — device flow automático (abre verificação, polling)
+ * await manageAgentCredentialMitra({ action: 'connect', target: 'codex' });
+ */
+declare function manageAgentCredentialMitra(options: ConnectAgentCredentialOptions): Promise<ConnectAgentSubscriptionResult>;
+/**
+ * RPC direto contra o backend. Retorno depende de (action, target) — veja docs.
+ *
+ * @example
+ * await manageAgentCredentialMitra({ action: 'list' });
+ * await manageAgentCredentialMitra({ action: 'status', target: 'anthropic' });
+ * await manageAgentCredentialMitra({ action: 'validate', target: 'openai', key: 'sk-...' });
+ * await manageAgentCredentialMitra({ action: 'save', target: 'glm', key: '...' });
+ * await manageAgentCredentialMitra({ action: 'remove', target: 'claude' });
  */
-declare function disconnectAgentChatMitra(): void;
+declare function manageAgentCredentialMitra<R = ManageAgentCredentialResult>(options: ManageAgentCredentialOptions): Promise<R>;
 
 /**
  * Mitra Interactions SDK - Services
@@ -993,4 +1146,4 @@ declare function setProfileScreensMitra(options: SetProfileScreensOptions): Prom
  */
 declare function setProfileServerFunctionsMitra(options: SetProfileServerFunctionsOptions): Promise<SetProfilePermissionResponse>;
 
-export { type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type CallIntegrationOptions, type CallIntegrationResponse, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, disconnectAgentChatMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };
+export { type AgentApiKeyTarget, type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentSubscriptionAccount, type AgentSubscriptionTarget, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type CallIntegrationOptions, type CallIntegrationResponse, type ConnectAgentCredentialOptions, type ConnectAgentSubscriptionResult, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type CredentialAction, type CredentialTarget, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type ManageAgentCredentialOptions, type ManageAgentCredentialResult, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, manageAgentCredentialMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };

package/dist/index.d.ts

@@ -627,6 +627,109 @@ interface AgentTaskSession {
     clearQueue(): void;
     on<E extends AgentTaskEventName>(event: E, handler: (payload: AgentTaskEventMap[E]) => void): () => void;
 }
+/** Targets de subscription (OAuth/device flow). */
+type AgentSubscriptionTarget = 'claude' | 'openai_oauth' | 'codex';
+/** Targets de API key (8 providers suportados pelo backend). */
+type AgentApiKeyTarget = 'anthropic' | 'openai' | 'gemini' | 'kimi' | 'minimax' | 'glm' | 'qwen' | 'openrouter';
+/** Union — qualquer credencial. */
+type CredentialTarget = AgentSubscriptionTarget | AgentApiKeyTarget;
+/**
+ * Verbos aceitos por `manageAgentCredentialMitra`.
+ *
+ * Baixo nível (RPC direto contra o backend `credentials`):
+ *   status | remove | list | validate | save
+ *   oauth_start | oauth_exchange | device_start | device_poll | device_cancel
+ *
+ * Alto nível (orquestrado no browser, NÃO é um type WS — encadeia as actions
+ * de baixo nível + abre popup + espera autorização):
+ *   connect
+ */
+type CredentialAction = 'connect' | 'status' | 'remove' | 'list' | 'validate' | 'save' | 'oauth_start' | 'oauth_exchange' | 'device_start' | 'device_poll' | 'device_cancel';
+/**
+ * Opções de baixo nível (RPC direto) de `manageAgentCredentialMitra`. Campos
+ * extras (key, code, codeVerifier, redirectUri, pollId, accessToken,
+ * refreshToken, expiresAt) são empacotados em `data` antes de enviar ao backend.
+ *
+ * NÃO use com action='connect' — para isso use ConnectAgentCredentialOptions.
+ */
+interface ManageAgentCredentialOptions {
+    action: Exclude<CredentialAction, 'connect'>;
+    /** Obrigatório exceto para action='list'. */
+    target?: CredentialTarget;
+    /** Para `save` / `validate` de API key. */
+    key?: string;
+    /** Para `oauth_exchange`. */
+    code?: string;
+    /** Para `oauth_exchange`. */
+    state?: string;
+    /** Para `oauth_exchange`. */
+    codeVerifier?: string;
+    /** Para `oauth_start` (openai_oauth) e `oauth_exchange` (openai_oauth). */
+    redirectUri?: string;
+    /** Para `device_poll` / `device_cancel`. */
+    pollId?: string;
+    /** Para `save` (codex). */
+    accessToken?: string;
+    /** Para `save` (codex). */
+    refreshToken?: string;
+    /** Para `save` (codex). */
+    expiresAt?: number;
+}
+/** Tipo "ampliado" — o backend retorna shapes diferentes por (action, target). */
+type ManageAgentCredentialResult = unknown;
+interface AgentSubscriptionAccount {
+    email: string;
+    orgName: string;
+}
+/**
+ * Opções de alto nível de `manageAgentCredentialMitra` quando action='connect'.
+ * Orquestra o fluxo OAuth/device ponta-a-ponta no browser (abre popup, espera
+ * autorização, troca por tokens server-side).
+ */
+interface ConnectAgentCredentialOptions {
+    action: 'connect';
+    target: AgentSubscriptionTarget;
+    /**
+     * Callback que retorna o código que o usuário copiou da página da Anthropic
+     * após autorizar. **Obrigatório** para target='claude'.
+     */
+    onCodeNeeded?: (info: {
+        authUrl: string;
+        state: string;
+    }) => Promise<string> | string;
+    /**
+     * URL no domínio do app publicado que captura o `?code=` da OAuth e faz
+     * `window.opener.postMessage({ mitraOpenAICode: code }, '*')`.
+     * **Obrigatório** para target='openai_oauth'.
+     */
+    redirectUri?: string;
+    /** Timeout esperando o postMessage (default 5min). */
+    messageTimeoutMs?: number;
+    /**
+     * Callback opcional que recebe o `userCode` e `verificationUrl` assim que
+     * o device flow inicia (use pra exibir na UI além do popup automático).
+     */
+    onDeviceCode?: (info: {
+        userCode: string | null;
+        verificationUrl: string | null;
+    }) => void;
+    /** Intervalo de poll do device flow (default 2000ms). */
+    pollIntervalMs?: number;
+    /** Timeout total do device flow (default 15min). */
+    deviceTimeoutMs?: number;
+    /** Nome da window do popup (default depende do target). */
+    windowName?: string;
+    /** `features` string passada para `window.open`. */
+    windowFeatures?: string;
+}
+interface ConnectAgentSubscriptionResult {
+    target: AgentSubscriptionTarget;
+    success: boolean;
+    /** Presente em claude / openai_oauth (epoch ms). */
+    expiresAt?: number;
+    /** Presente apenas em claude. */
+    account?: AgentSubscriptionAccount | null;
+}
 
 /**
  * Mitra Interactions SDK - Instance
@@ -676,7 +779,7 @@ interface MitraInstance {
     resetPassword(options: ResetPasswordOptions): Promise<Record<string, unknown>>;
     getAgentChats(options?: GetAgentChatsOptions): Promise<AgentChat[]>;
     getAgentTask(options: GetAgentTaskOptions): AgentTaskSession;
-    disconnectAgentChat(): void;
+    manageAgentCredential(options: ManageAgentCredentialOptions | ConnectAgentCredentialOptions): Promise<unknown>;
     openChat(): void;
     closeChat(): void;
 }
@@ -832,11 +935,61 @@ declare function getAgentChatsMitra(options?: GetAgentChatsOptions): Promise<Age
  * mesma taskId for aberta duas vezes, retorna a MESMA instância (cache).
  */
 declare function getAgentTaskMitra(options: GetAgentTaskOptions): AgentTaskSession;
+
 /**
- * Fecha o WebSocket do Agent Chat. Sessions ativas devem chamar close()
- * antes — esta função é destinada a teardown global (logout, testes).
+ * Mitra Interactions SDK — Agent Credentials
+ *
+ * Função ÚNICA `manageAgentCredentialMitra` sobre /sdk-ws para todas as
+ * operações de credencial do agente:
+ *   - API keys (8 providers: anthropic, openai, gemini, kimi, minimax, glm, qwen, openrouter)
+ *   - Subscriptions OAuth (Claude / OpenAI / Codex device flow)
+ *
+ * Actions de baixo nível (RPC direto contra o backend):
+ *   status | remove | list | validate | save
+ *   oauth_start | oauth_exchange | device_start | device_poll | device_cancel
+ *
+ * Action de alto nível (orquestra o fluxo ponta-a-ponta no browser):
+ *   connect — abre popup, espera código/postMessage/poll, troca por tokens.
+ *
+ * SEGURANÇA: o token de subscription NUNCA volta cru pro cliente. É salvo
+ * server-side (Firestore) e injetado no sandbox E2B direto de lá. O retorno
+ * de `connect`/`oauth_exchange` traz só { connected, expiresAt, account }.
+ */
+
+/**
+ * Conecta uma subscription ponta-a-ponta (abre popup, espera autorização,
+ * troca por tokens). Retorno tipado: { target, success, expiresAt?, account? }.
+ *
+ * @example
+ * // Claude — caller mostra modal pedindo o paste do código
+ * await manageAgentCredentialMitra({
+ *   action: 'connect', target: 'claude',
+ *   onCodeNeeded: async () => prompt('Cole o código:') ?? ''
+ * });
+ *
+ * @example
+ * // OpenAI — callback page no domínio do app faz postMessage
+ * await manageAgentCredentialMitra({
+ *   action: 'connect', target: 'openai_oauth',
+ *   redirectUri: window.location.origin + '/auth/openai-callback'
+ * });
+ *
+ * @example
+ * // Codex — device flow automático (abre verificação, polling)
+ * await manageAgentCredentialMitra({ action: 'connect', target: 'codex' });
+ */
+declare function manageAgentCredentialMitra(options: ConnectAgentCredentialOptions): Promise<ConnectAgentSubscriptionResult>;
+/**
+ * RPC direto contra o backend. Retorno depende de (action, target) — veja docs.
+ *
+ * @example
+ * await manageAgentCredentialMitra({ action: 'list' });
+ * await manageAgentCredentialMitra({ action: 'status', target: 'anthropic' });
+ * await manageAgentCredentialMitra({ action: 'validate', target: 'openai', key: 'sk-...' });
+ * await manageAgentCredentialMitra({ action: 'save', target: 'glm', key: '...' });
+ * await manageAgentCredentialMitra({ action: 'remove', target: 'claude' });
  */
-declare function disconnectAgentChatMitra(): void;
+declare function manageAgentCredentialMitra<R = ManageAgentCredentialResult>(options: ManageAgentCredentialOptions): Promise<R>;
 
 /**
  * Mitra Interactions SDK - Services
@@ -993,4 +1146,4 @@ declare function setProfileScreensMitra(options: SetProfileScreensOptions): Prom
  */
 declare function setProfileServerFunctionsMitra(options: SetProfileServerFunctionsOptions): Promise<SetProfilePermissionResponse>;
 
-export { type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type CallIntegrationOptions, type CallIntegrationResponse, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, disconnectAgentChatMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };
+export { type AgentApiKeyTarget, type AgentChat, type AgentDeltaEvent, type AgentErrorEvent, type AgentMessage, type AgentQueueChangeEvent, type AgentStatusChangeEvent, type AgentSubscriptionAccount, type AgentSubscriptionTarget, type AgentTaskCreatedEvent, type AgentTaskEventMap, type AgentTaskEventName, type AgentTaskSession, type AgentTaskStatus, type AgentToolEvent, type AgentTurnEndEvent, type AgentType, type CallIntegrationOptions, type CallIntegrationResponse, type ConnectAgentCredentialOptions, type ConnectAgentSubscriptionResult, type CreateProfileOptions, type CreateProfileResponse, type CreateRecordOptions, type CreateRecordsBatchOptions, type CredentialAction, type CredentialTarget, type DeleteProfileOptions, type DeleteProfileResponse, type DeleteRecordOptions, type EmailLoginOptions, type EmailResendCodeOptions, type EmailSignupOptions, type EmailVerifyCodeOptions, type ExecuteDataLoaderOptions, type ExecuteDataLoaderResponse, type ExecuteDbActionOptions, type ExecuteDbActionResponse, type ExecutePublicServerFunctionAsyncResponse, type ExecutePublicServerFunctionOptions, type ExecutePublicServerFunctionResponse, type ExecuteServerFunctionAsyncOptions, type ExecuteServerFunctionAsyncResponse, type ExecuteServerFunctionOptions, type ExecuteServerFunctionResponse, type GetAgentChatsOptions, type GetAgentTaskCreateOptions, type GetAgentTaskOpenOptions, type GetAgentTaskOptions, type GetProfileDetailsOptions, type GetProfileDetailsResponse, type GetPublicServerFunctionExecutionOptions, type GetPublicServerFunctionExecutionResponse, type GetRecordOptions, type GetVariableOptions, type GetVariableResponse, type IntegrationResponse, type ListIntegrationsOptions, type ListProfilesOptions, type ListProfilesResponse, type ListRecordsOptions, type ListRecordsResponse, type ListVariablesOptions, type ListVariablesResponse, type LoginOptions, type LoginResponse, type ManageAgentCredentialOptions, type ManageAgentCredentialResult, type MitraConfig, type MitraInstance, type PatchRecordOptions, type ProfileTableRef, type QueuedItem, type ResetPasswordOptions, type RunActionOptions, type RunActionResponse, type SendOptions, type SendPasswordResetCodeOptions, type SetFileStatusOptions, type SetFileStatusResponse, type SetProfileActionsOptions, type SetProfileDmlTablesOptions, type SetProfilePermissionResponse, type SetProfileScreensOptions, type SetProfileSelectTablesOptions, type SetProfileServerFunctionsOptions, type SetProfileUsersOptions, type SetVariableOptions, type SetVariableResponse, type StopServerFunctionExecutionOptions, type StopServerFunctionExecutionResponse, type UpdateProfileOptions, type UpdateProfileResponse, type UpdateRecordOptions, type UploadFileOptions, type UploadFileResponse, type ValidatePasswordResetCodeOptions, callIntegrationMitra, closeChatMitra, configureSdkMitra, createMitraInstance, createProfileMitra, createRecordMitra, createRecordsBatchMitra, deleteProfileMitra, deleteRecordMitra, emailLoginMitra, emailResendCodeMitra, emailSignupMitra, emailVerifyCodeMitra, executeDataLoaderMitra, executeDbActionMitra, executePublicServerFunctionAsyncMitra, executePublicServerFunctionMitra, executeServerFunctionAsyncMitra, executeServerFunctionMitra, getAgentChatsMitra, getAgentTaskMitra, getConfig, getProfileDetailsMitra, getPublicServerFunctionExecutionMitra, getRecordMitra, getVariableMitra, listIntegrationsMitra, listProfilesMitra, listRecordsMitra, listVariablesMitra, loginMitra, loginWithEmailMitra, loginWithGoogleMitra, loginWithMicrosoftMitra, manageAgentCredentialMitra, openChatMitra, patchRecordMitra, refreshTokenSilently, resetPasswordMitra, resolveProjectId, runActionMitra, sendPasswordResetCodeMitra, setFileStatusMitra, setProfileActionsMitra, setProfileDmlTablesMitra, setProfileScreensMitra, setProfileSelectTablesMitra, setProfileServerFunctionsMitra, setProfileUsersMitra, setVariableMitra, stopServerFunctionExecutionMitra, updateProfileMitra, updateRecordMitra, uploadFileLoadableMitra, uploadFilePublicMitra, validatePasswordResetCodeMitra };

package/dist/index.js

@@ -912,6 +912,9 @@ var transport = {
     if (taskId) sessionsByTaskId.delete(taskId);
   }
 };
+function getTransport() {
+  return transport;
+}
 async function getAgentChatsMitra(options) {
   const projectId = resolveProjectId2(options == null ? void 0 : options.projectId);
   return transport.request("get_chats", { projectId });
@@ -938,18 +941,151 @@ function getAgentTaskMitra(options) {
   }
   throw new Error("getAgentTaskMitra: passe { create: true } ou { taskId }.");
 }
-function disconnectAgentChatMitra() {
-  if (ws) {
-    try {
-      ws.close();
-    } catch (e) {
+
+// src/agent-credentials.ts
+var SUB_TARGETS = ["claude", "openai_oauth", "codex"];
+function isSubscriptionTarget(t) {
+  return !!t && SUB_TARGETS.includes(t);
+}
+function manageAgentCredentialMitra(options) {
+  if (options.action === "connect") {
+    return connectSubscription(options);
+  }
+  return rpc(options);
+}
+function rpc(options) {
+  const transport2 = getTransport();
+  const { action, target, ...rest } = options;
+  const data = {};
+  for (const [k, v] of Object.entries(rest)) {
+    if (v !== void 0) data[k] = v;
+  }
+  return transport2.request("credentials", { action, target, data });
+}
+function connectSubscription(options) {
+  const { target } = options;
+  if (!isSubscriptionTarget(target)) {
+    throw new Error(`manageAgentCredentialMitra(connect): target inv\xE1lido (${target}). Use 'claude' | 'openai_oauth' | 'codex'.`);
+  }
+  if (target === "claude") return connectClaude(options);
+  if (target === "openai_oauth") return connectOpenAIOAuth(options);
+  return connectCodexDevice(options);
+}
+async function connectClaude(options) {
+  var _a, _b;
+  if (!options.onCodeNeeded) {
+    throw new Error("manageAgentCredentialMitra(connect, claude): onCodeNeeded \xE9 obrigat\xF3rio.");
+  }
+  const start = await rpc({
+    action: "oauth_start",
+    target: "claude"
+  });
+  openPopup(start.authUrl, (_a = options.windowName) != null ? _a : "mitra-claude-auth", options.windowFeatures);
+  const code = await options.onCodeNeeded({ authUrl: start.authUrl, state: start.state });
+  if (!code) throw new Error("manageAgentCredentialMitra(connect, claude): c\xF3digo vazio.");
+  const exchange = await rpc({
+    action: "oauth_exchange",
+    target: "claude",
+    code,
+    state: start.state,
+    codeVerifier: start.codeVerifier
+  });
+  return {
+    target: "claude",
+    success: exchange.success === true,
+    expiresAt: exchange.expiresAt,
+    account: (_b = exchange.account) != null ? _b : null
+  };
+}
+async function connectOpenAIOAuth(options) {
+  var _a, _b;
+  if (!options.redirectUri) {
+    throw new Error("manageAgentCredentialMitra(connect, openai_oauth): redirectUri \xE9 obrigat\xF3rio.");
+  }
+  const start = await rpc({
+    action: "oauth_start",
+    target: "openai_oauth",
+    redirectUri: options.redirectUri
+  });
+  const popup = openPopup(start.authUrl, (_a = options.windowName) != null ? _a : "mitra-openai-auth", options.windowFeatures);
+  const code = await waitForPostMessageCode(popup, (_b = options.messageTimeoutMs) != null ? _b : 5 * 6e4);
+  const exchange = await rpc({
+    action: "oauth_exchange",
+    target: "openai_oauth",
+    code,
+    state: start.state,
+    codeVerifier: start.codeVerifier,
+    redirectUri: options.redirectUri
+  });
+  return {
+    target: "openai_oauth",
+    success: exchange.success === true,
+    expiresAt: exchange.expiresAt
+  };
+}
+async function connectCodexDevice(options) {
+  var _a, _b, _c, _d;
+  const start = await rpc({ action: "device_start", target: "codex" });
+  if (start.verificationUrl) {
+    openPopup(start.verificationUrl, (_a = options.windowName) != null ? _a : "mitra-codex-auth", options.windowFeatures);
+  }
+  (_b = options.onDeviceCode) == null ? void 0 : _b.call(options, { userCode: start.userCode, verificationUrl: start.verificationUrl });
+  const pollInterval = (_c = options.pollIntervalMs) != null ? _c : 2e3;
+  const deadline = Date.now() + ((_d = options.deviceTimeoutMs) != null ? _d : 15 * 6e4);
+  while (Date.now() < deadline) {
+    const result = await rpc({ action: "device_poll", target: "codex", pollId: start.pollId });
+    if (result.status === "completed") {
+      return { target: "codex", success: true };
+    }
+    if (result.status === "failed" || result.status === "expired" || result.status === "not_found") {
+      throw new Error(`manageAgentCredentialMitra(connect, codex): ${result.status}${result.error ? ` \u2014 ${result.error}` : ""}`);
     }
-    ws = null;
+    await sleep(pollInterval);
   }
-  sessionsByTaskId.clear();
-  handlersByTaskId.clear();
-  pendingHandlers.clear();
-  streamingTaskIds.clear();
+  await rpc({ action: "device_cancel", target: "codex", pollId: start.pollId }).catch(() => {
+  });
+  throw new Error("manageAgentCredentialMitra(connect, codex): timeout.");
+}
+function openPopup(url, name, features) {
+  if (typeof window === "undefined") return null;
+  const defaults = "width=600,height=720,menubar=no,toolbar=no,location=no,status=no";
+  return window.open(url, name, features != null ? features : defaults);
+}
+function waitForPostMessageCode(popup, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    let done = false;
+    const handler = (event) => {
+      var _a;
+      const data = event.data;
+      if (!data || typeof data !== "object") return;
+      const code = (_a = data.mitraOpenAICode) != null ? _a : (data == null ? void 0 : data.type) === "mitra-openai-code" ? data.code : void 0;
+      if (typeof code === "string" && code.length > 0) {
+        finish();
+        resolve(code);
+      }
+    };
+    const timer = setTimeout(() => {
+      finish();
+      reject(new Error("manageAgentCredentialMitra(connect): timeout esperando c\xF3digo do popup."));
+    }, timeoutMs);
+    const closedPoll = setInterval(() => {
+      if (popup && popup.closed) {
+        finish();
+        reject(new Error("manageAgentCredentialMitra(connect): popup fechado antes de receber c\xF3digo."));
+      }
+    }, 500);
+    function finish() {
+      if (done) return;
+      done = true;
+      window.removeEventListener("message", handler);
+      clearTimeout(timer);
+      clearInterval(closedPoll);
+    }
+    window.addEventListener("message", handler);
+  });
+}
+function sleep(ms) {
+  return new Promise((r) => setTimeout(r, ms));
 }
 
 // src/instance.ts
@@ -1306,8 +1442,8 @@ function createMitraInstance(initialConfig) {
     getAgentTask(options) {
       return getAgentTaskMitra(options);
     },
-    disconnectAgentChat() {
-      disconnectAgentChatMitra();
+    manageAgentCredential(options) {
+      return manageAgentCredentialMitra(options);
     },
     // Chat
     openChat() {
@@ -1824,7 +1960,6 @@ exports.createRecordMitra = createRecordMitra;
 exports.createRecordsBatchMitra = createRecordsBatchMitra;
 exports.deleteProfileMitra = deleteProfileMitra;
 exports.deleteRecordMitra = deleteRecordMitra;
-exports.disconnectAgentChatMitra = disconnectAgentChatMitra;
 exports.emailLoginMitra = emailLoginMitra;
 exports.emailResendCodeMitra = emailResendCodeMitra;
 exports.emailSignupMitra = emailSignupMitra;
@@ -1850,6 +1985,7 @@ exports.loginMitra = loginMitra;
 exports.loginWithEmailMitra = loginWithEmailMitra;
 exports.loginWithGoogleMitra = loginWithGoogleMitra;
 exports.loginWithMicrosoftMitra = loginWithMicrosoftMitra;
+exports.manageAgentCredentialMitra = manageAgentCredentialMitra;
 exports.openChatMitra = openChatMitra;
 exports.patchRecordMitra = patchRecordMitra;
 exports.refreshTokenSilently = refreshTokenSilently;